Description
Memory safety vulnerability leading to memory corruption and Denial of Service in NetScaler ADC and Gateway if the appliance must be configured as a Gateway (VPN Vserver) with RDP Feature enabled OR the appliance must be configured as a Gateway (VPN Vserver) and RDP Proxy Server Profile is created and set to Gateway (VPN Vserver) OR the appliance must be configured as a Auth Server (AAA Vserver) with RDP Feature enabled
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NetSclaer | NetScaler ADC | 14.1 – < 29.72, 13.1 – < 55.34, 13.1-FIPS – < 37.207, 12.1-FIPS – < 55.321, 12.1-NDcPP – < 55.321 | 29.72 |
| NetScaler | NetScaler Gateway | 14.1 – < 29.72, 13.1 – < 55.34, 13.1-FIPS – < 37.207, 12.1-FIPS – < 55.321, 12.1-NDcPP – < 55.321 | 29.72 |
Advisories 2
- NCSC-2024-0443 Kwetsbaarheden verholpen in Citrix NetScaler ADC en NetScaler Gateway NCSC-NL (Netherlands) · Nov 13, 2024
- WID-SEC-2024-3425 Citrix NetScaler ADC und NetScaler Gateway: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 12, 2024